Module 1.1: Cloud Computing Models (IaaS, PaaS, SaaS)

Module 1.2: AWS Global Infrastructure (Regions, AZs, Edge Locations)

Module 1.3: AWS Account Setup & Billing

Module 1.4: Basic IAM (Users, Groups, Roles)

Hands-on Lab: Creating AWS Organization, Setting up IAM users with MFA

Module 2.1: EC2 Fundamentals (Instance Types, AMIs, EBS)

Module 2.2: Auto Scaling & Load Balancing (ELB)

Module 2.3: Serverless Introduction (Lambda, API Gateway)

Module 2.4: Container Basics (ECS, EKS overview)

Hands-on Lab: Deploying 3-tier web application (EC2 + ALB + ASG)

Module 3.1: S3 (Storage Classes, Versioning, Lifecycle Policies)

Module 3.2: EFS & FSx

Module 3.3: Database Services (RDS, DynamoDB, Aurora)

Module 3.4: Data Migration Tools (DMS, Snow Family)

Hands-on Lab: Building secure S3

Module 4.1: VPC Fundamentals (CIDR, Subnets, Route Tables)

Module 4.2: Internet Connectivity (IGW, NAT Gateway)

Module 4.3: Hybrid Connectivity (VPN, Direct Connect)

Module 4.4: DNS Management (Route 53)

Hands-on Project: Designing and implementing a production-ready VPC with public/private subnets

End of Phase 1 Assessment: AWS SAA Practice Exam + Architecture Design Review

Module 5.1: IAM Advanced (Policies, Conditions, Permission Boundaries)

Module 5.2: AWS Organizations & Service Control Policies (SCPs)

Module 5.3: AWS SSO & Identity Center

Module 5.4: Cross-Account Access & Role Assumption

Hands-on Lab: Implementing least privilege access with permission boundaries and SCPs

Module 6.1: Security Groups vs NACLs – Deep Dive

Module 6.2: VPC Advanced Security (Flow Logs, VPC Endpoints, PrivateLink)

Module 6.3: Network Firewall & Gateway Load Balancer

Module 6.4: WAF & Shield (DDoS Protection)

Hands-on Lab: Securing VPC with NACLs, Security Groups, and implementing WAF rules

Module 7.1: AWS KMS Deep Dive (CMKs, Key Policies, Envelope Encryption)

Module 7.2: Secrets Management (Secrets Manager, Parameter Store)

Module 7.3: S3 Security (Bucket Policies, ACLs, Encryption Options)

Module 7.4: Database Encryption (RDS, DynamoDB)

Hands-on Lab: Implementing end-to-end encryption for application data

Module 8.1: CloudTrail Configuration & Best Practices

Module 8.2: CloudWatch Logs & Metrics for Security

Module 8.3: GuardDuty (Threat Detection)

Module 8.4: Security Hub & Config (Compliance Monitoring)

Hands-on Lab: Building centralized logging solution with automated threat detection

Module 10.1: AWS Well-Architected Framework – Security Pillar

Module 10.2: Compliance Frameworks (SOC 2, PCI-DSS, HIPAA)

Module 10.3: AWS Audit Manager & Artifact

Module 10.4: Designing Secure Multi-Account Strategies (Landing Zone, Control Tower)

Hands-on Lab: Conducting Well-Architected Framework review

Module 11.1: CloudFormation & Terraform Security Best Practices

Module 11.2: CI/CD Pipeline Security (CodePipeline, CodeBuild)

Module 11.3: Security Testing in Pipeline (SAST/DAST, Secret Scanning)

Module 11.4: Container Security (ECR, EKS Security)

Hands-on Lab: Building secure CI/CD pipeline with integrated security checks